Archive
July 2009
Vulnerabilities first published in this month (UTC), newest first.
446 results · Feed
-
Unscored —
Multiple integer overflows in the (1) PL_Base64Decode and (2) PL_Base64Encode functions in nsprpub/lib/libc/src/base64.…
-
Unscored —
The setTimeout function in Mozilla Firefox before 3.0.12 does not properly preserve object wrapping, which allows remot…
-
Unscored —
Mozilla Firefox before 3.0.12 does not properly handle an SVG element that has a property with a watch function and an …
-
Unscored —CVE-2009-2569 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Verlihub Control Panel (VHCP) 1.7e allow remote attackers to inj…
-
Unscored —CVE-2009-2574 Public exploit
index.php in MiniTwitter 0.2 beta allows remote authenticated users to modify certain options of arbitrary accounts via…
-
Unscored —CVE-2009-2568 Public exploit
Stack-based buffer overflow in Sorinara Streaming Audio Player (SAP) 0.9 allows remote attackers to execute arbitrary c…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Fivestar module 5.x-1.x before 5.x-1.14 and 6.x-1.x before 6.x-1…
-
Unscored —CVE-2009-2571 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in VerliAdmin 0.3.7 and 0.3.8 allow remote attackers t…
-
Unscored —CVE-2009-2567 Public exploit
SQL injection vulnerability in the Almond Classifieds (com_aclassf) component 5.6.2 for Joomla! allows remote attackers…
-
Unscored —CVE-2009-2573 Public exploit
Multiple SQL injection vulnerabilities in MiniTwitter 0.2 beta, when magic_quotes_gpc is disabled, allow remote authent…
-
Unscored —
Stack-based buffer overflow in the Symantec.FaxViewerControl.1 ActiveX control in WinFax\DCCFAXVW.DLL in Symantec WinFa…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Perl CGI's By Mrs. Shiromuku shiromuku(fs6)DIARY 2.40 allows remote attacke…
-
Unscored —
Stack-based buffer overflow in TFM MMPlayer 2.0, and possibly 2.0.0.30, allows remote attackers to execute arbitrary co…
-
Unscored —
Multiple unspecified vulnerabilities in Wireshark 1.2.0 allow remote attackers to cause a denial of service (applicatio…
-
Unscored —CVE-2009-2564 Public exploit
NOS Microsystems getPlus Download Manager, as used in Adobe Reader 1.6.2.36 and possibly other versions, Corel getPlus …
-
Unscored —CVE-2009-2558 Public exploit
system/message.php in Admin News Tools 2.5 does not properly restrict access, which allows remote attackers to post new…
-
Unscored —
Unspecified vulnerability in the AFS dissector in Wireshark 0.9.2 through 1.2.0 allows remote attackers to cause a deni…
-
Unscored —CVE-2009-2557 Public exploit
Directory traversal vulnerability in system/download.php in Admin News Tools 2.5 allows remote attackers to read arbitr…
-
Unscored —
Buffer overflow in the IPMI dissector in Wireshark 1.2.0 allows remote attackers to cause a denial of service (crash) v…
-
Unscored —
Unspecified vulnerability in the Infiniband dissector in Wireshark 1.0.6 through 1.2.0, when running on unspecified pla…
-
Unscored —
Unspecified vulnerability in the sFlow dissector in Wireshark 1.2.0 allows remote attackers to cause a denial of servic…
-
Unscored —
Google Chrome before 2.0.172.37 allows attackers to leverage renderer access to cause a denial of service (memory corru…
-
Unscored —
Heap-based buffer overflow in src/jsregexp.cc in Google V8 before 1.1.10.14, as used in Google Chrome before 2.0.172.37…
-
Unscored —CVE-2009-2553 Public exploit
Multiple SQL injection vulnerabilities in comments.php in Super Simple Blog Script 2.5.4, when magic_quotes_gpc is disa…
-
Unscored —
Integer underflow in Armed Assault (aka ArmA) 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier al…
-
Unscored —CVE-2009-2554 Public exploit
SQL injection vulnerability in the search method in jobline.class.php in Jobline (com_jobline) 1.1.2.2, 1.3.1, and poss…
-
Unscored —CVE-2009-2552 Public exploit
Multiple directory traversal vulnerabilities in comments.php in Super Simple Blog Script 2.5.4 allow remote attackers t…
-
Unscored —CVE-2009-2551 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in ScriptsEz Easy Image Downloader allow remote attackers to inject…
-
Unscored —
Armed Assault (aka ArmA) 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers…
-
Unscored —
SQL injection vulnerability in Advanced Electron Forum (AEF) 1.x, when magic_quotes_gpc is disabled, allows remote atta…
-
Unscored —CVE-2009-2550 Public exploit
Stack-based buffer overflow in Hamster Audio Player 0.3a allows remote attackers to execute arbitrary code via a long s…
-
Unscored —
Directory traversal vulnerability in Advanced Electron Forum (AEF) 1.x allows remote attackers to determine the existen…
-
Unscored —
Format string vulnerability in Armed Assault (aka ArmA) 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and …
-
Unscored —
Netscape 6 and 8 allows remote attackers to cause a denial of service (memory consumption) via a large integer value fo…
-
Unscored —CVE-2009-2536 EPSS 19%
Microsoft Internet Explorer 5 through 8 allows remote attackers to cause a denial of service (memory consumption and ap…
-
High 7.5
The web browser on the Sony PLAYSTATION 3 (PS3) allows remote attackers to cause a denial of service (memory consumptio…
-
Unscored —CVE-2009-2535 Public exploit
Mozilla Firefox before 2.0.0.19 and 3.x before 3.0.5, SeaMonkey, and Thunderbird allow remote attackers to cause a deni…
-
Unscored —
The Aigo P8860 allows remote attackers to cause a denial of service (memory consumption and browser hang) via a large i…
-
Unscored —
Opera, possibly 9.64 and earlier, allows remote attackers to cause a denial of service (memory consumption) via a large…
-
Unscored —
KDE Konqueror allows remote attackers to cause a denial of service (memory consumption) via a large integer value for t…